Azure-Sentinel/Playbooks/Change-Incident-Severity
Lior Tamir aad48299ca Update playbook trigger names 2022-02-22 17:02:56 +02:00
..
alert-trigger Update playbook trigger names 2022-02-22 17:02:56 +02:00
incident-trigger Update playbook trigger names 2022-02-22 17:02:56 +02:00
readme.md Updating Deploy buttons and links part 1 2021-06-16 00:25:40 +00:00

readme.md

Change-Incident-Severity

author: Yaniv Shasha

This playbook will change Incident Severity based on specific username that is part of the Incident user entity.

Quick Deployment

Deploy with incident trigger (recommended)

After deployment, attach this playbook to an automation rule so it runs when the incident is created.

Learn more about automation rules

Deploy to Azure Deploy to Azure Gov

Deploy with alert trigger

After deployment, you can run this playbook manually on an alert or attach it to an analytics rule so it will rune when an alert is created.

Deploy to Azure Deploy to Azure Gov

Prerequisites

None

Screenshots

Incident Trigger Incident Trigger

Alert Trigger Alert Trigger